Cyder is on a mission to create an internet where users own and get compensated for their data. We work closely with consumer brands to establish a data trust that allows them to seamlessly collect real-time actionable data directly from their customers, without the need to complete surveys. This allows the brands to personalize their marketing, accelerate their growth, and empower their customers. Since launching a waitlist in 2021, thousands of people have organically visited Cyder’s website to find ways to protect their data, and since launching the beta platform, it has helped users block millions of creepy trackers. Cyder is building web 3.0 technology that enables radical data security and seamless compensation whenever a user shares their data. You can learn more by visiting getcyder.com. Cyder | The world's first customer data trust

Cyder

Zoonomia, Vol. I Or, the Laws of Organic Life by Erasmus Darwin is part of HackerNoon’s Book Blog Post series. You can jump to any chapter in this book here: [LINK TO TABLE OF LINK]. Section XXX: Paralysis of the Liver and Kidneys SECTION 30. PARALYSIS OF THE LIVER AND KIDNEYS . . From the ingurgitation of spirituous liquors into the stomach and duodenum, the termination of the common bile-duct in that bowel becomes stimulated into unnatural action, and a greater quantity of bile is produced from all the secretory vessels of the liver, by the association of their motions with those of their excretory ducts; as has been explained in Section . and . but as all parts of the body, that have been affected with stronger stimuli for any length of time, become less susceptible of motion, from their natural weaker stimuli, it follows, that the motions of the secretory vessels, and in consequence the secretion of bile, is less than is natural during the intervals of sobriety. . If this ingurgitation of spirituous liquors has been daily continued in considerable quantity, and is then suddenly intermitted, a languor or paralysis of the common bile-duct is induced; the bile is prevented from being poured into the intestines; and as the bilious absorbents are stimulated into stronger action by its accumulation, and by the acrimony or viscidity, which it acquires by delay, it is absorbed, and carried to the receptacle of the chyle; or otherwise the secretory vessels of the liver, by the above-mentioned stimulus, invert their motions, and regurgitate their contents into the blood, as sometimes happens to the tears in the lachrymal sack, see Sect. . and one kind of jaundice is brought on. I 1 XXIV XXV 2 XXIV. 2. 7 There is reason to believe, that the bile is most frequently returned into the circulation by the inverted motions of these hepatic glands, for the bile does not seem liable to be absorbed by the lymphatics, for it soaks through the gall-ducts, and is frequently found in the cellular membrane. This kind of jaundice is not generally attended with pain, neither at the extremity of the bile-duct, where it enters the duodenum, nor on the region of the gall-bladder. Mr. S. a gentleman between 40 and 50 years of age, had had the jaundice about six weeks, without pain, sickness, or fever; and had taken emetics, cathartics, mercurials, bitters, chalybeates, essential oil, and ether, without apparent advantage. On a supposition that the obstruction of the bile might be owing to the paralysis, or torpid action of the common bile-duct, and the stimulants taken into the stomach seeming to have no effect, I directed half a score smart electric shocks from a coated bottle, which held about a quart, to be passed through the liver, and along the course of the common gall-duct, as near as could be guessed, and on that very day the stools became yellow; he continued the electric shocks a few days more, and his skin gradually became clear. . The bilious vomiting and purging, that affects some people by intervals of a few weeks, is a less degree of this disease; the bile-duct is less irritable than natural, and hence the bile becomes accumulated in the gall-bladder, and hepatic ducts, till by its quantity, acrimony or viscidity, a greater degree of irritation is produced, and it is suddenly evacuated, or lastly from the absorption of the more liquid parts of the bile, the remainder becomes inspissated, and chrystallizes into masses too large to pass, and forms another kind of jaundice, where the bile-duct is not quite paralytic, or has regained its irritability. 3 This disease is attended with much pain, which at first is felt at the pit of the stomach, exactly in the centre of the body, where the bile-duct enters the duodenum; afterwards, when the size of the bile-stones increase, it is also felt on the right side, where the gall-bladder is situated. The former pain at the pit of the stomach recurs by intervals, as the bile-stone is pushed against the neck of the duct; like the paroxysms of the stone in the urinary bladder, the other is a more dull and constant pain. Where these bile-stones are too large to pass, and the bile-ducts possess their sensibility, this becomes a very painful and hopeless disease. I made the following experiments with a view to their chemical solution. Some fragments of the same bile-stone were put into the weak spirit of marine salt, which is sold in the shops, and into solution of mild alcali; and into a solution of caustic alcali; and into oil of turpentine; without their being dissolved. All these mixtures were after some time put into a heat of boiling water, and then the oil of turpentine dissolved its fragments of bile-stone, but no alteration was produced upon those in the other liquids except some change of their colour. Some fragments of the same bile-stone were put into vitriolic æther, and were quickly dissolved without additional heat. Might not æther mixed with yolk of egg or with honey be given advantageously in bilious concretions? I have in two instances seen from 30 to 50 bile-stones come away by stool, about the size of large peas, after having given six grains of calomel in the evening, and four ounces of oil of almonds or olives on the succeeding morning. I have also given half a pint of good olive or almond oil as an emetic during the painful fit, and repeated it in half an hour, if the first did not operate, with frequent good effect. . Another disease of the liver, which I have several times observed, consists in the inability or paralysis of the secretory vessels. This disease has generally the same cause as the preceding one, the too frequent potation of spirituous liquors, or the too sudden omission of them, after the habit is confined; and is greater or less in proportion, as the whole or a part of the liver is affected, and as the inability or paralysis is more or less complete. 4 This palsy of the liver is known from these symptoms, the patients have generally passed the meridian of life, have drank fermented liquors daily, but perhaps not been opprobrious drunkards; they lose their appetite, then their flesh and strength diminish in consequence, there appears no bile in their stools, nor in their urine, nor is any hardness or swelling perceptible on the region of the liver. But what is peculiar to this disease, and distinguishes it from all others at the first glance of the eye, is the bombycinous colour of the skin, which, like that of full-grown silkworms, has a degree of transparency with a yellow tint not greater than is natural to the serum of the blood. Mr. C. and Mr. B. both very strong men, between 50 and 60 years of age, who had drank ale at their meals instead of small beer, but were not reputed hard-drinkers, suddenly became weak, lost their appetite, flesh, and strength, with all the symptoms above enumerated, and died in about two months from the beginning of their malady. Mr. C. became anasarcous a few days before his death, and Mr. B. had frequent and great hæmorrhages from an issue, and some parts of his mouth, a few days before his death. In both these cases calomel, bitters and chalybeates were repeatedly used without effect. One of the patients described above, Mr. C, was by trade a plumber; both of them could digest no food, and died apparently for want of blood. Might not the transfusion of blood be used in these cases with advantage? . When the paralysis of the hepatic glands is less complete, or less universal, a schirrosity of some part of the liver is induced; for the secretory vessels retaining some of their living power take up a fluid from the circulation, without being sufficiently irritable to carry it forwards to their excretory ducts; hence the body, or receptacle of each gland, becomes inflated, and this distension increases, till by its very great stimulus inflammation is produced, or till those parts of the viscus become totally paralytic. This disease is distinguishable from the foregoing by the palpable hardness or largeness of the liver; and as the hepatic glands are not totally paralytic, or the whole liver not affected, some bile continues to be made. The inflammations of this viscus, consequent to the schirrosity of it, belong to the diseases of the sensitive motions, and will be treated of hereafter. 5 . The ancients are said to have possessed an art of increasing the livers of geese to a size greater than the remainder of the goose. Martial. l. 13. epig. 58.—This is said to have been done by fat and figs. Horace, l. 2. sat. 8.—Juvenal sets these large livers before an epicure as a great rarity. Sat. 5. l. 114; and Persius, sat. 6. l. 71. Pliny says these large goose-livers were soaked in mulled milk, that is, I suppose, milk mixed with honey and wine; and adds, "that it is uncertain whether Scipio Metellus, of consular dignity, or M. Sestius, a Roman knight, was the great discoverer of this excellent dish." A modern traveller, I believe Mr. Brydone, asserts that the art of enlarging the livers of geese still exists in Sicily; and it is to be lamented that he did not import it into his native country, as some method of affecting the human liver might perhaps have been collected from it; besides the honour he might have acquired in improving our giblet pies. 6 Our wiser caupones, I am told, know how to fatten their fowls, as well as their geese, for the London markets, by mixing gin instead of figs and fat with their food; by which they are said to become sleepy, and to fatten apace, and probably acquire enlarged livers; as the swine are asserted to do, which are fed on the sediments of barrels in the distilleries; and which so frequently obtains in those, who ingurgitate much ale, or wine, or drams. . The irritative diseases of the kidneys, pancreas, spleen, and other glands, are analogous to those of the liver above described, differing only in the consequences attending their inability to action. For instance, when the secretory vessels of the kidneys become disobedient to the stimulus of the passing current of blood, no urine is separated or produced by them; their excretory mouths become filled with concreted mucus, or calculus matter, and in eight or ten days stupor and death supervenes in consequence of the retention of the feculent part of the blood. II This disease in a slighter degree, or when only a part of the kidney is affected, is succeeded by partial inflammation of the kidney in consequence of previous torpor. In that case greater actions of the secretory vessels occur, and the nucleus of gravel is formed by the inflamed mucous membranes of the tubuli uriniferi, as farther explained in its place. This torpor, or paralysis of the secretory vessels of the kidneys, like that of the liver, owes its origin to their being previously habituated to too great stimulus; which in this country is generally owing to the alcohol contained in ale or wine; and hence must be registered amongst the diseases owing to inebriety; though it may be caused by whatever occasionally inflames the kidney; as too violent riding on horseback, or the cold from a damp bed, or by sleeping on the cold ground; or perhaps by drinking in general too little aqueous fluids. . I shall conclude this section on the diseases of the liver induced by spirituous liquors, with the well known story of Prometheus, which seems indeed to have been invented by physicians in those ancient times, when all things were clothed in hieroglyphic, or in fable. Prometheus was painted as stealing fire from heaven, which might well represent the inflammable spirit produced by fermentation; which may be said to animate or enliven the man of clay: whence the conquests of Bacchus, as well as the temporary mirth and noise of his devotees. But the after punishment of those, who steal this accursed fire, is a vulture gnawing the liver; and well allegorises the poor inebriate lingering for years under painful hepatic diseases. When the expediency of laying a further tax on the distillation of spirituous liquors from grain was canvassed before the House of Commons some years ago, it was said of the distillers, with great truth, "They take the bread from the people, and convert it into poison!" Yet is this manufactory of disease permitted to continue, as appears by its paying into the treasury above 900,000l. near a million of money annually. And thus, under the names of rum, brandy, gin, whisky, usquebaugh, wine, cyder, beer, and porter, alcohol is become the bane of the Christian world, as opium of the Mahometan. III Evoe! parce, liber? Parce, gravi metuende thirso!—Hor. About HackerNoon Book Series: We bring you the most important technical, scientific, and insightful public domain books. This book is part of the public domain. Darwin, Erasmus, 2005. Zoonomia, Vol. Or, the Laws of Organic Life. Urbana, Illinois: Project Gutenberg. Retrieved May 2022 from https://www.gutenberg.org/files/15707/15707-h/15707-h.htm#sect_XXX This eBook is for the use of anyone anywhere at no cost and with almost no restrictions whatsoever. You may copy it, give it away or re-use it under the terms of the Project Gutenberg License included with this eBook or online at www.gutenberg.org, located at https://www.gutenberg.org/policy/license.html.

Early Notes on Paralysis of the Liver and Kidneys 

1811 Dictionary in the Vulgar Tongue: Section P

Fortify Your Digital Defenses: Top Home Cybersecurity Strategies for Personal Protection

We’re living in a pandemic of data breaches. More than 17 billion personal records were exposed last year, and 2024 has begun with a string of several high-profile back-to-back breaches in the first quarter, including data exposure of millions of AT&T account holders. Big Tech companies are in the crosshairs, too, facing mounting criticism from government officials calling for urgent reform. Even the open-source software supply chain is under threat from social engineering campaigns looking to compromise maintainer projects. ‘Social engineering’ is the key term here because it’s not software vulnerabilities that enterprises should be worried about. Those only make up 5% of breaches, while 68% involve the human element. How can this be? And what should companies do about it? The doors we open for hackers – and how to close them Exotic and sophisticated zero-day attacks and vulnerability exploits may garner the bulk of attention from the press, CISOs, and security teams, but the reality is that today’s cybersecurity tools are becoming exceedingly efficient at preventing and remediating these attacks. Hackers know this. They’re not going after software vulnerabilities. They’re attacking identity because it’s far cheaper and easier to exploit or force human error. So, they target credentials such as passwords, browser cookies, and private API keys. The data says it all, really: a Verizon report proves these credentials show up in 86% of security breaches related to web-based applications and platforms. Obtaining these credentials is how attackers do the most damage with minimal ease. Sometimes, these credentials are shared a little too freely. Other times, a shocking amount goes unused. The point is that organizations have lost control of their credentials, and the result is a growing fragmentation of identities across increasingly complex technology stacks. Those stacks are filled with layers that manage security in different ways, from Kubernetes clusters to Linux servers, copious amounts of specialized databases, IoT, cloud APIs, etc. It gets even more convoluted on a granular level once you’re inside a cloud account. If you have three Windows servers and seven Linux servers, each of those also governs its own login credentials. If you’ve got a multi-cloud setup with both AWS and Azure, those companies also track identity in different ways. In the quest for greater efficiency, DevOps engineers are even splitting cloud-native applications into smaller micro-services, each needing its own identity. Each of these layers opens yet another door for attackers to enter. If you’re an enterprise operating with more DevOps and cloud infrastructure, you’re inevitably going to add even more layers to the stack. More layers mean more doors. In other words, the mere presence of secrets, such as private keys, API keys, passwords, or even browser cookies, should be seen as a vulnerability waiting to be exploited in an identity attack. Stop using secrets for access purposes The problem isn’t the technology itself, though, but human behavior. Any time you create more doors, you’re increasing the probability of human error. So, how do you fix these data breaches? The first step is to consolidate all identities. All identities - including people and machines like servers, laptops, bots, databases, microservices, etc. – must be united into an inventory that provides a single source of truth. The second step is to make these identities impossible to impersonate or “steal”, effectively making the infrastructure security immune to human mistakes. To do this, minimize or eliminate the reliance on secrets for authentication purposes. As a rule, your identity should also never ever be presented as information. The only way to prevent data theft on a catastrophic scale is to remove all static credentials and standing privileges and instead deploy strong authentication with cryptographic identity. In practice, this means basing identity on three-point criteria that include 1) a user’s specific device, 2) a biometric marker, and 3) a personal identification number (PIN). In theory, this is exactly how the iPhone works: the biometric marker is facial recognition, the personal identification number is your PIN code, and the Trusted Platform Module (TPM) chip inside the phone is what governs the ‘machine identity.’ But credentials – or doors, if you will – are just half the story. Observability isn’t enough The thing about human error is that it’s blind to the quality of your cybersecurity and observability tools. It only takes one human to make a mistake by granting access to the wrong people. This already happens. As we learned earlier this year, Google Kubernetes Engine admins are not immune to misunderstanding the significance and scope of default user groups and assigning dangerous permissions to them. The cybersecurity industry has spent a disproportionate amount of time and money on observability. Companies are acquiring and maintaining tools to respond to threats rather than fix enforcement to proactively protect infrastructure. One reason companies tend to be put off by fixing enforcement is the aforementioned complexity of modern technology stacks. The natural assumption is you need competent teams who can configure every single layer with its own authentication, its own authorization, its own encryption, and its own audit. The smarter solution here would be for the cybersecurity industry to embrace a new paradigm for modernizing secure access to infrastructure. This paradigm has to be built on embracing mechanisms that unify all access within a single control point for authentication and authorization. Most enterprises sorely need (and yet lack) this mechanism as a front-end to all of their disparate infrastructure. Access should only ever be granted based on tasks, and only the minimum required privileges should ever be granted. These should then be de-provisioned immediately afterward. This concept of on-demand least-privileged access then needs to be applied to both human and non-human machine and service accounts. In other words, every company should be able to easily enforce the policy that developers should never have access to production data. However, without unified access controls, this will remain a sci-fi concept for many cybersecurity professionals. Unifying access controls isn’t just helpful in the proactive sense. If a data breach does eventually occur, a centralized view of all the access relationships attributed to a user or resource is essential for purposes like quickly revoking unwanted access or auditing. This is how enforcement and observability can be combined for agility. And if you’ve already assigned cryptographic identity beforehand to each individual user or resource, you’ve now associated the actual human user with each action. This means assigning the right permissions to the right people becomes a much easier task. Defend against human behavior There are, of course, positive signs of technology leaders in the industry taking data breaches very seriously. Microsoft has pledged to shore cloud vulnerabilities, prevent credentials from being stolen, and automatically enforce multi-factor authentication for employees. Any efforts to embrace stronger authentication and  cryptographic measures should be commended. If cybersecurity is going to ‘win,’ though, enterprises have to understand that stopping data breaches isn’t about defending against viruses or ultra-sophisticated hacking techniques. It’s about defending against human behavior that exposes infrastructure to data leaks. That’s the mindset that needs to change. Unified access control, paired with zero trust, must be the foundation for modernizing secure access. We’re living in a pandemic of data breaches. More than 17 billion personal records were exposed last year , and 2024 has begun with a string of several high-profile back-to-back breaches in the first quarter, including data exposure of millions of AT&T account holders. 17 billion personal records were exposed last year Big Tech companies are in the crosshairs , too, facing mounting criticism from government officials calling for urgent reform. Even the open-source software supply chain is under threat from social engineering campaigns looking to compromise maintainer projects. Big Tech companies are in the crosshairs Even the open-source software supply chain is under threat ‘Social engineering’ is the key term here because it’s not software vulnerabilities that enterprises should be worried about. Those only make up 5% of breaches , while 68% involve the human element. How can this be? And what should companies do about it? make up 5% of breaches The doors we open for hackers – and how to close them The doors we open for hackers – and how to close them Exotic and sophisticated zero-day attacks and vulnerability exploits may garner the bulk of attention from the press, CISOs, and security teams, but the reality is that today’s cybersecurity tools are becoming exceedingly efficient at preventing and remediating these attacks. Hackers know this. They’re not going after software vulnerabilities. They’re attacking identity because it’s far cheaper and easier to exploit or force human error. So, they target credentials such as passwords, browser cookies, and private API keys. The data says it all, really: a Verizon report proves these credentials show up in 86% of security breaches related to web-based applications and platforms. 86% of security breaches Obtaining these credentials is how attackers do the most damage with minimal ease. Sometimes, these credentials are shared a little too freely. Other times, a shocking amount goes unused . The point is that organizations have lost control of their credentials, and the result is a growing fragmentation of identities across increasingly complex technology stacks. Those stacks are filled with layers that manage security in different ways, from Kubernetes clusters to Linux servers, copious amounts of specialized databases, IoT, cloud APIs, etc. a shocking amount goes unused It gets even more convoluted on a granular level once you’re inside a cloud account. If you have three Windows servers and seven Linux servers, each of those also governs its own login credentials. If you’ve got a multi-cloud setup with both AWS and Azure, those companies also track identity in different ways. In the quest for greater efficiency, DevOps engineers are even splitting cloud-native applications into smaller micro-services, each needing its own identity. Each of these layers opens yet another door for attackers to enter. If you’re an enterprise operating with more DevOps and cloud infrastructure, you’re inevitably going to add even more layers to the stack. More layers mean more doors. In other words, the mere presence of secrets, such as private keys, API keys, passwords, or even browser cookies, should be seen as a vulnerability waiting to be exploited in an identity attack. Stop using secrets for access purposes Stop using secrets for access purposes The problem isn’t the technology itself, though, but human behavior. Any time you create more doors, you’re increasing the probability of human error. So, how do you fix these data breaches? The first step is to consolidate all identities. All identities - including people and machines like servers, laptops, bots, databases, microservices, etc. – must be united into an inventory that provides a single source of truth. The second step is to make these identities impossible to impersonate or “steal”, effectively making the infrastructure security immune to human mistakes. To do this, minimize or eliminate the reliance on secrets for authentication purposes. As a rule, your identity should also never ever be presented as information. The only way to prevent data theft on a catastrophic scale is to remove all static credentials and standing privileges and instead deploy strong authentication with cryptographic identity. In practice, this means basing identity on three-point criteria that include 1) a user’s specific device, 2) a biometric marker, and 3) a personal identification number (PIN). In theory, this is exactly how the iPhone works: the biometric marker is facial recognition, the personal identification number is your PIN code, and the Trusted Platform Module (TPM) chip inside the phone is what governs the ‘machine identity.’ But credentials – or doors, if you will – are just half the story. Observability isn’t enough Observability isn’t enough The thing about human error is that it’s blind to the quality of your cybersecurity and observability tools. It only takes one human to make a mistake by granting access to the wrong people. This already happens. As we learned earlier this year, Google Kubernetes Engine admins are not immune to misunderstanding the significance and scope of default user groups and assigning dangerous permissions to them . misunderstanding the significance and scope of default user groups and assigning dangerous permissions to them The cybersecurity industry has spent a disproportionate amount of time and money on observability. Companies are acquiring and maintaining tools to respond to threats rather than fix enforcement to proactively protect infrastructure. One reason companies tend to be put off by fixing enforcement is the aforementioned complexity of modern technology stacks. The natural assumption is you need competent teams who can configure every single layer with its own authentication, its own authorization, its own encryption, and its own audit. The smarter solution here would be for the cybersecurity industry to embrace a new paradigm for modernizing secure access to infrastructure. This paradigm has to be built on embracing mechanisms that unify all access within a single control point for authentication and authorization. Most enterprises sorely need (and yet lack) this mechanism as a front-end to all of their disparate infrastructure. Access should only ever be granted based on tasks, and only the minimum required privileges should ever be granted. These should then be de-provisioned immediately afterward. This concept of on-demand least-privileged access then needs to be applied to both human and non-human machine and service accounts. In other words, every company should be able to easily enforce the policy that developers should never have access to production data. However, without unified access controls, this will remain a sci-fi concept for many cybersecurity professionals. Unifying access controls isn’t just helpful in the proactive sense. If a data breach does eventually occur, a centralized view of all the access relationships attributed to a user or resource is essential for purposes like quickly revoking unwanted access or auditing. This is how enforcement and observability can be combined for agility. And if you’ve already assigned cryptographic identity beforehand to each individual user or resource, you’ve now associated the actual human user with each action. This means assigning the right permissions to the right people becomes a much easier task. Defend against human behavior Defend against human behavior There are, of course, positive signs of technology leaders in the industry taking data breaches very seriously. Microsoft has pledged to shore cloud vulnerabilities, prevent credentials from being stolen, and automatically enforce multi-factor authentication for employees. Any efforts to embrace stronger authentication and  cryptographic measures should be commended. If cybersecurity is going to ‘win,’ though, enterprises have to understand that stopping data breaches isn’t about defending against viruses or ultra-sophisticated hacking techniques. It’s about defending against human behavior that exposes infrastructure to data leaks. That’s the mindset that needs to change. Unified access control, paired with zero trust, must be the foundation for modernizing secure access.

Social Engineering is the Biggest Cyber Threat

Beijing, China – RockTree Capital, a leading crypto-native fund and merchant bank headquartered in Beijing, announces the launch of its immersive website, showcasing a futuristic film-noir concept: the Cyberpunk Crypto City. The website’s cutting-edge interactive cityscape represents RockTree's vision where Web3 has become pervasive, fusing technology, finance, and culture. The site, set in the future near the 11th halving of bitcoin, builds on the ideas of the cypherpunk movement, through advocating for the widespread use of decentralization and privacy-enhancing technologies as a route to self sovereignty and freedom for human beings everywhere.  As an early-stage investor and bespoke accelerator in Asia for its portfolio companies, RockTree Capital has been instrumental in geometrically accelerating its investee projects’ go-to-market cycle. https://www.youtube.com/watch?v=NUFuYDJBO4A&embedable=true Through its ultra-localized strategies and grassroots community building initiatives, RockTree has empowered emerging founders and projects to thrive in both East and West markets. Leveraging deep regional relationships with leading crypto institutions, capital collaborators, and Web3 partners, RockTree invests in and accelerates the trajectory of projects from Infrastructure, DeFi, Cross-chain, and the Bitcoin Ecosystem. Founded by visionary investor Omer Ozden and headquartered in Beijing, China, RockTree Capital operates at the nexus of the East & West with a crypto native team that bridges the human, cultural, capital and media gap across these markets. RockTree embodies a truly grassroots approach that unites Eastern and Western crypto markets and benefits its portfolio investments, which include amongst others; dYdX, The Graph, Chainlink, Fantom, Pocket, Maple, Covalent, Axelar, Eclipse, and BEVM. "RockTree focuses on the human aspects of Web3. In addition to unifying the collaboration of top people in Eastern and Western crypto markets, our core strength is identifying the human hallmarks of success for Founders and Team," says Omer Ozden, Founder and Chairman of RockTree Capital. "We utilize advanced behavioral neuroscience methods to determine Founders’ emotional intelligence, execution capabilities and integrity. We prioritize not only technological innovation, but also the individuals behind that innovation, their psychology and levels of consciousness. And we invite those projects into our trusted international ecosystem and methodology, so they can scale rapidly in foreign markets, instead of trying to figure it out organically through trial and error," said Ozden. The Cyberpunk Crypto City website represents RockTree's forward-looking vision decades in the future, where Web3 technology and digital assets penetrate all peoples’ daily lives, and decentralized finance becomes a pervasive consumer product, like soft drinks or chewing gum, allowing true democratization of finance. Visitors to the Cyberpunk Crypto City website will immerse themselves in a retro film-noir homage, with captivating visuals of a cybernetic metropolis of replicants, that is bilingual in English and Chinese, and powered by blockchain technology. Experience the future of finance at RockTree Capital's Cyberpunk Crypto City and join us in shaping the next chapter of Web3 innovation. For media inquiries, please contact: Alisa Loi lisa@rocktreecapital.com About RockTree Capital RockTree Capital is an early stage crypto-native fund and merchant bank based in Beijing, China. Our portfolio companies experience geometric scale in Asian markets through the RockTree Acceleration Program by combining our ultra-localized go-to-market strategies and grassroots long-term community building. RockTree invests into top-tier crypto projects and helps build Decacorns in the areas of Infrastructure, DeFi, Cross-chain and Bitcoin Ecosystem www.rocktreecapital.com https://twitter.com/RockTreeCapital This story was distributed as a release by Btcwire under HackerNoon’s Business Blogging Program. Learn more about the program here. Beijing, China – RockTree Capital, a leading crypto-native fund and merchant bank headquartered in Beijing, announces the launch of its immersive website, showcasing a futuristic film-noir concept: the Cyberpunk Crypto City. The website’s cutting-edge interactive cityscape represents RockTree's vision where Web3 has become pervasive, fusing technology, finance, and culture. The site, set in the future near the 11th halving of bitcoin, builds on the ideas of the cypherpunk movement, through advocating for the widespread use of decentralization and privacy-enhancing technologies as a route to self sovereignty and freedom for human beings everywhere.  As an early-stage investor and bespoke accelerator in Asia for its portfolio companies, RockTree Capital has been instrumental in geometrically accelerating its investee projects’ go-to-market cycle. RockTree Capital RockTree Capital https://www.youtube.com/watch?v=NUFuYDJBO4A&embedable=true https://www.youtube.com/watch?v=NUFuYDJBO4A&embedable=true Through its ultra-localized strategies and grassroots community building initiatives, RockTree has empowered emerging founders and projects to thrive in both East and West markets. Leveraging deep regional relationships with leading crypto institutions, capital collaborators, and Web3 partners, RockTree invests in and accelerates the trajectory of projects from Infrastructure, DeFi, Cross-chain, and the Bitcoin Ecosystem. Founded by visionary investor Omer Ozden and headquartered in Beijing, China, RockTree Capital operates at the nexus of the East & West with a crypto native team that bridges the human, cultural, capital and media gap across these markets. RockTree embodies a truly grassroots approach that unites Eastern and Western crypto markets and benefits its portfolio investments, which include amongst others; dYdX, The Graph, Chainlink, Fantom, Pocket, Maple, Covalent, Axelar, Eclipse, and BEVM. "RockTree focuses on the human aspects of Web3. In addition to unifying the collaboration of top people in Eastern and Western crypto markets, our core strength is identifying the human hallmarks of success for Founders and Team," says Omer Ozden, Founder and Chairman of RockTree Capital. "RockTree focuses on the human aspects of Web3. In addition to unifying the collaboration of top people in Eastern and Western crypto markets, our core strength is identifying the human hallmarks of success for Founders and Team," says Omer Ozden, Founder and Chairman of RockTree Capital. "We utilize advanced behavioral neuroscience methods to determine Founders’ emotional intelligence, execution capabilities and integrity. We prioritize not only technological innovation, but also the individuals behind that innovation, their psychology and levels of consciousness. And we invite those projects into our trusted international ecosystem and methodology, so they can scale rapidly in foreign markets, instead of trying to figure it out organically through trial and error," said Ozden. "We utilize advanced behavioral neuroscience methods to determine Founders’ emotional intelligence, execution capabilities and integrity. We prioritize not only technological innovation, but also the individuals behind that innovation, their psychology and levels of consciousness. And we invite those projects into our trusted international ecosystem and methodology, so they can scale rapidly in foreign markets, instead of trying to figure it out organically through trial and error," said Ozden. The Cyberpunk Crypto City website represents RockTree's forward-looking vision decades in the future, where Web3 technology and digital assets penetrate all peoples’ daily lives, and decentralized finance becomes a pervasive consumer product, like soft drinks or chewing gum, allowing true democratization of finance. Visitors to the Cyberpunk Crypto City website will immerse themselves in a retro film-noir homage, with captivating visuals of a cybernetic metropolis of replicants, that is bilingual in English and Chinese, and powered by blockchain technology. Experience the future of finance at RockTree Capital's Cyberpunk Crypto City and join us in shaping the next chapter of Web3 innovation. RockTree Capital's Cyberpunk Crypto City RockTree Capital's Cyberpunk Crypto City For media inquiries, please contact: Alisa Loi lisa@rocktreecapital.com lisa@rocktreecapital.com lisa@rocktreecapital.com About RockTree Capital RockTree Capital is an early stage crypto-native fund and merchant bank based in Beijing, China. Our portfolio companies experience geometric scale in Asian markets through the RockTree Acceleration Program by combining our ultra-localized go-to-market strategies and grassroots long-term community building. RockTree invests into top-tier crypto projects and helps build Decacorns in the areas of Infrastructure, DeFi, Cross-chain and Bitcoin Ecosystem www.rocktreecapital.com www.rocktreecapital.com www.rocktreecapital.com https://twitter.com/RockTreeCapital https://twitter.com/RockTreeCapital https://twitter.com/RockTreeCapital This story was distributed as a release by Btcwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Btcwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

RockTree Capital Unveils Cyberpunk Crypto Future in a New Website

Intro In today's world, where cybercrimes are becoming increasingly widespread, it is important to have access to effective tools for investigation and counteraction against these threats. One such tool is the CSI Linux operating system, specially designed for the needs of cybersecurity and cyber investigations. CSI Linux aims to provide users with tools for fast and accurate detection of digital traces and evidence that can be used for criminal investigations or for ensuring cybersecurity in organizations. The developers of this operating system claim that it simplifies the process of collecting, analyzing, and interpreting digital data, making it an important tool for professionals in the field of cybersecurity and cyber investigations. But is it really so? Let's find out... Basic information To begin with, I would like to provide some basic information about this distribution. Official website: https://csilinux.com/ As of the writing of this article, CSI Linux uses Ubuntu 22.04 LTS as its base platform. CSI Linux is an open-source project, so anyone interested can contribute to making it better. The installation process is quite simple, and there are many videos on this topic, such as this one. Although the process has changed slightly now, after downloading the disk image, you simply need to add (Machine -> Add) the virtual disk file in Vbox format to VirtualBox for it to run. To log into the system by default, use the username "CSI" and the password "CSI." There is also a whole book dedicated to working with CSI Linux, which can be purchased here. The terminology, list of all available software in CSI Linux, and other documentation are available at this link. Previously, CSI Linux had three separate packages on the CSI Linux Investigator platform, but now CSI Linux Gateway and CSI Linux Analyst are merged into one package, while CSI Linux SIEM is available as a separate image on the official website. All distributions can also be downloaded from the official website. For a better understanding, let me describe the three components of CSI Linux mentioned above: CSI Linux SIEM: This is a virtual machine included in the CSI Linux Investigator distribution. In fact, it is an Ubuntu distribution that includes a configured Zeek IDS and ELK Stack (Elasticsearch, Logstash, and Kibana). It is used as an intrusion detection system to protect other virtual machines (CSI Linux Analyst and CSI Linux Gateway), process logs, and display data on the management panels of CSI Linux Analyst. CSI Linux Gateway: This is a TOR user gateway that operates in a "sandbox" using utilities such as AppArmor, Jailbreak, and Shorewall Firewall. When using CSI Linux Analyst + CSI Linux Gateway, all traffic will pass through the TOR node. CSI Linux Analyst: This is the "core" of this distribution. It is a virtual machine running Ubuntu with a large amount of pre-installed software grouped by categories. We will discuss the list of categories later. It's worth noting that in the Incident Response menu, there is a section for CSI SIEM, but it is not active and displays "CSI SIEM Installer and Launch utility coming soon…" indicating a likely intention to integrate it with the third distribution. However, in any case, you can install and run SIEM separately using virtualization in VirtualBox, allowing you to have the full set of packages on the same server. Functionality review Now, let's get a bit closer to the mentioned operating system. To start working, we create a case (click on the "Start a Case" icon on the desktop or go to Menu -> CSI Linux Tools -> Start a Case). Then, all subsequent operations can be performed within the created case, where the results will be stored. Upon creation, you are immediately prompted to start work, and there are several options in the CSI Case Management Menu. It's important to know that most of the software is not pre-installed, and an automatic installation script is launched when selecting a program. Now, let's quickly go through the list of programs (both pre-installed and not) in each available category: CSI Linux Tools: A set of programs for system updates, management of CSI Tor VPN and Whonix Gateway for traffic routing, working with API resources used in CSI Linux, downloading videos, creating screenshots from various online resources, and much more. Secure Comms: This category includes "secure" online messengers. Encryption: Everything for decrypting hashes, password cracking, storing passwords, and personal data. OSINT/Online Investigations: A fairly large category where everyone can find the necessary tools for OSINT tasks. Among the most interesting are social media searches, phone and email searches. Dark Web: If the investigator encounters connection problems, this category is suitable. 'TOR > VPN,’ 'WHONIX'’ and so on, all for pleasant surfing. Incident Response: Everything for incident investigation, malware scanners, network analysis (Wireshark), and more. Computer Forensics: Computer forensics (data recovery and file analysis). Mobile Forensics: Mobile forensics tools for analysis and work with mobile phones. Vehicle Forensics: A set of utilities for working with the CAN (Controller Area Network) protocol. CAN is a network technology widely used in automation, embedded devices, and the automotive industry. Malware Analysis and Reverse Engineering: For the analysis of malicious scripts and programs, reverse engineering. SIGINT: A set of programs for radio channel analysis, hacking, and programming (FM, WiFi, etc.). Virtualization: A set of managers for virtualization. Threat Intelligence: Threat reconnaissance, cybercrime maps worldwide, and more. Practice Below are some screenshots of CSI Linux in action, demonstrating several tools and functionalities. You'll find attempts to search for individuals by username and email, showcasing the system's capabilities in gathering information from various sources. Conclusion After a basic introduction to the system and conducting several tests searching by phone, email, and username, I can say that CSI Linux partially works out of the box, but in most cases, you need to configure the software you're trying to investigate. There's an issue with blocking bots, through which criminalization occurs, as Tor VPN IP addresses have a poor reputation, or maybe sites identify it as bot activity and quickly block connections. The system is noticeably geared towards working with the world's most famous resources and social networks, but it lacks "out-of-the-box" support for local ones, which may be the most significant in a particular country. The set of programs is quite interesting, although not everything works right away, as already noted. For example, when I searched for data using my email, Buster found an article from 15 years ago on "Economic Truth" mentioning my address and Skype account. However, a simple Google search can find the same and even more. Furthermore, a search by username produced a bunch of irrelevant and unreliable information, which theoretically could be useful if filtered manually. Now I would like to add a little comparison with a competing system to CSI Linux and a more well-known operating system. Kali Linux, a Linux distribution, is popular in the cybersecurity community and is a basic tool for many cybersecurity specialists. However, comparing these two systems, we can say that the software offered by default in each of them is quite different. It's essential to understand that all the software presented in CSI Linux can be installed on Kali Linux and vice versa, as both are based on Ubuntu/Debian and are essentially extensions of the base. As the developers themselves claim, Kali Linux, with its set of programs, is more geared towards tasks such as penetration testing, security research, computer forensics, and reverse engineering. As soon as you log in and look at the main menu, you'll find mostly software for testing websites, social networks, or servers for vulnerabilities or hacking. There are many different bots, attackers, network analysis programs, and so on. So, these two systems are based on the same foundation but are created and configured for different tasks, although they can replace each other. CSI Linux has the right to exist, and it is definitely improving, but much needs to be "fine-tuned" to fit its needs, and one should be prepared for that. The "breakthrough" through the set of programs exists, but it lacks a wow effect and has quite a few inconsistencies. I hope you found this article interesting. By the way, I should mention that the CSI community has its own academy where you can take a course on various aspects of the project. Details are available at the CSI Linux Academy. Intro In today's world, where cybercrimes are becoming increasingly widespread, it is important to have access to effective tools for investigation and counteraction against these threats. One such tool is the CSI Linux operating system, specially designed for the needs of cybersecurity and cyber investigations. CSI Linux aims to provide users with tools for fast and accurate detection of digital traces and evidence that can be used for criminal investigations or for ensuring cybersecurity in organizations. The developers of this operating system claim that it simplifies the process of collecting, analyzing, and interpreting digital data, making it an important tool for professionals in the field of cybersecurity and cyber investigations. But is it really so? Let's find out... Basic information To begin with, I would like to provide some basic information about this distribution. Official website: https://csilinux.com/ As of the writing of this article, CSI Linux uses Ubuntu 22.04 LTS as its base platform. CSI Linux is an open-source project, so anyone interested can contribute to making it better. The installation process is quite simple, and there are many videos on this topic, such as this one. this Although the process has changed slightly now, after downloading the disk image, you simply need to add (Machine -> Add) the virtual disk file in Vbox format to VirtualBox for it to run. To log into the system by default, use the username "CSI" and the password "CSI." There is also a whole book dedicated to working with CSI Linux, which can be purchased here . here The terminology, list of all available software in CSI Linux, and other documentation are available at this link . link Previously, CSI Linux had three separate packages on the CSI Linux Investigator platform, but now CSI Linux Gateway and CSI Linux Analyst are merged into one package, while CSI Linux SIEM is available as a separate image on the official website. All distributions can also be downloaded from the official website. For a better understanding, let me describe the three components of CSI Linux mentioned above: CSI Linux SIEM: This is a virtual machine included in the CSI Linux Investigator distribution. In fact, it is an Ubuntu distribution that includes a configured Zeek IDS and ELK Stack (Elasticsearch, Logstash, and Kibana). It is used as an intrusion detection system to protect other virtual machines (CSI Linux Analyst and CSI Linux Gateway), process logs, and display data on the management panels of CSI Linux Analyst. CSI Linux SIEM: CSI Linux Gateway: This is a TOR user gateway that operates in a "sandbox" using utilities such as AppArmor, Jailbreak, and Shorewall Firewall. When using CSI Linux Analyst + CSI Linux Gateway, all traffic will pass through the TOR node. CSI Linux Gateway: CSI Linux Analyst: This is the "core" of this distribution. It is a virtual machine running Ubuntu with a large amount of pre-installed software grouped by categories. We will discuss the list of categories later. CSI Linux Analyst: It's worth noting that in the Incident Response menu, there is a section for CSI SIEM, but it is not active and displays "CSI SIEM Installer and Launch utility coming soon…" indicating a likely intention to integrate it with the third distribution. However, in any case, you can install and run SIEM separately using virtualization in VirtualBox, allowing you to have the full set of packages on the same server. Functionality review Now, let's get a bit closer to the mentioned operating system. To start working, we create a case (click on the "Start a Case" icon on the desktop or go to Menu -> CSI Linux Tools -> Start a Case). Then, all subsequent operations can be performed within the created case, where the results will be stored. Upon creation, you are immediately prompted to start work, and there are several options in the CSI Case Management Menu. It's important to know that most of the software is not pre-installed, and an automatic installation script is launched when selecting a program. Now, let's quickly go through the list of programs (both pre-installed and not) in each available category: CSI Linux Tools: CSI Linux Tools: CSI Linux Tools: A set of programs for system updates, management of CSI Tor VPN and Whonix Gateway for traffic routing, working with API resources used in CSI Linux, downloading videos, creating screenshots from various online resources, and much more. Secure Comms: Secure Comms: Secure Comms: This category includes "secure" online messengers. Encryption: Encryption: Encryption: Everything for decrypting hashes, password cracking, storing passwords, and personal data. OSINT/Online Investigations: OSINT/Online Investigations: OSINT/Online Investigations: A fairly large category where everyone can find the necessary tools for OSINT tasks. Among the most interesting are social media searches, phone and email searches. Dark Web: Dark Web: Dark Web: If the investigator encounters connection problems, this category is suitable. 'TOR > VPN,’ 'WHONIX'’ and so on, all for pleasant surfing. Incident Response: Incident Response: Incident Response: Everything for incident investigation, malware scanners, network analysis (Wireshark), and more. Computer Forensics: Computer Forensics: Computer Forensics: Computer forensics (data recovery and file analysis). Mobile Forensics: Mobile Forensics: Mobile Forensics: Mobile forensics tools for analysis and work with mobile phones. Vehicle Forensics: Vehicle Forensics: Vehicle Forensics: A set of utilities for working with the CAN (Controller Area Network) protocol. CAN is a network technology widely used in automation, embedded devices, and the automotive industry. Malware Analysis and Reverse Engineering: Malware Analysis and Reverse Engineering: Malware Analysis and Reverse Engineering: For the analysis of malicious scripts and programs, reverse engineering. SIGINT: SIGINT: SIGINT: A set of programs for radio channel analysis, hacking, and programming (FM, WiFi, etc.). Virtualization: Virtualization: Virtualization: A set of managers for virtualization. Threat Intelligence: Threat Intelligence: Threat Intelligence: Threat reconnaissance, cybercrime maps worldwide, and more. Practice Below are some screenshots of CSI Linux in action, demonstrating several tools and functionalities. You'll find attempts to search for individuals by username and email, showcasing the system's capabilities in gathering information from various sources. Conclusion After a basic introduction to the system and conducting several tests searching by phone, email, and username, I can say that CSI Linux partially works out of the box, but in most cases, you need to configure the software you're trying to investigate. There's an issue with blocking bots, through which criminalization occurs, as Tor VPN IP addresses have a poor reputation, or maybe sites identify it as bot activity and quickly block connections. The system is noticeably geared towards working with the world's most famous resources and social networks, but it lacks "out-of-the-box" support for local ones, which may be the most significant in a particular country. The set of programs is quite interesting, although not everything works right away, as already noted. For example, when I searched for data using my email, Buster found an article from 15 years ago on "Economic Truth" mentioning my address and Skype account. However, a simple Google search can find the same and even more. Furthermore, a search by username produced a bunch of irrelevant and unreliable information, which theoretically could be useful if filtered manually. Now I would like to add a little comparison with a competing system to CSI Linux and a more well-known operating system. Kali Linux , a Linux distribution, is popular in the cybersecurity community and is a basic tool for many cybersecurity specialists. However, comparing these two systems, we can say that the software offered by default in each of them is quite different. It's essential to understand that all the software presented in CSI Linux can be installed on Kali Linux and vice versa, as both are based on Ubuntu/Debian and are essentially extensions of the base. As the developers themselves claim, Kali Linux, with its set of programs, is more geared towards tasks such as penetration testing, security research, computer forensics, and reverse engineering. As soon as you log in and look at the main menu, you'll find mostly software for testing websites, social networks, or servers for vulnerabilities or hacking. There are many different bots, attackers, network analysis programs, and so on. Kali Linux So, these two systems are based on the same foundation but are created and configured for different tasks, although they can replace each other. CSI Linux has the right to exist, and it is definitely improving, but much needs to be "fine-tuned" to fit its needs, and one should be prepared for that. The "breakthrough" through the set of programs exists, but it lacks a wow effect and has quite a few inconsistencies. I hope you found this article interesting. By the way, I should mention that the CSI community has its own academy where you can take a course on various aspects of the project. Details are available at the CSI Linux Academy . CSI Linux Academy

CSI Linux: Linux Distribution for Cyber and OSINT Investigation

AI in web3 security is neither a passing fad nor a makeshift solution. On the contrary, it is now a focal point in the fight against cryptocurrency thefts and cyber attacks. AI companies in web3 are training AI algorithms to detect potential cyber attacks on DeFi protocols in a bid to reduce the probability of an attack significantly while increasing the response time. The ability of AI algorithms to detect potential threats can save millions of dollars of investors’ funds, highlighting not just the growing importance of AI but also cementing its place in web3 security, which is often described as a $4 billion problem. Although the use of AI in crime detection has long been around, it has only found relevance in crypto security where cyber thefts are rampant. AI algorithms are trained through a process called machine learning to spot anomalies and patterns commonly associated with cyber thefts and other types of crypto-related cyber attacks such as phishing and ransomware attacks. AI’s ability to provide a sophisticated security system gives it an edge over malicious software used by bad actors in attacking DeFi protocols. The advancement that AI in web3 security represents is preeminently self-evident in the latest Sonne Finance hack. There are numerous examples of such exploits and AI use cases but this incident being the latest in a long list of cyberattacks on DeFi protocols deserves to be critically studied. This sentiment is also informed by the volume of media coverage it has generated in the last 24 hours. The Sonne Finance Hack Sonne Finance, a decentralized lending protocol, reportedly lost $20 million in a major hack on May 14, 2024. The attack occurred in seven different transactions and lasted for thirty minutes before Sonne Finance halted operations to avert further thefts. Four minutes before the attack, Cyvers AI, a web3 security firm, detected the potential threat and alerted Sonne Finance at about 10:30 pm to the imminent danger. Commenting on the Sonne Finance hack,  Meir Dolev Co-Founder and CTO of Cyvers.AI said: " The hacker exploited Compound V2 empty market vulnerability where he conducted a precision loss attack that led to more than $20 million loss in 7 different transactions. Cyvers have detected the attack four minutes before the first exploit transaction" At the initial stage, Cyvers detected an attack on SonneFinance's USD Coin (USDC) and Wrapped Ether (WETH) contracts, which had already lost $3 million, but the situation quickly escalated resulting in a total loss of over $20 million by the protocol. This incident underscores the growing importance of Artificial Intelligence (AI) in the detection and mitigation of cryptocurrency theft. Moreover, as traditional security methods often struggle to keep pace with the ever-evolving tactics of cybercriminals. AI, however, offers several advantages: Real-time monitoring: AI systems can be deployed to continuously analyze vast amounts of data, identifying suspicious patterns that might escape human analysts. Faster response times: AI systems can react to threats much quicker than humans, allowing for a timely response to mitigate damage. Improved threat detection: AI algorithms are constantly learning to detect anomalies and patterns and may soon become adept at identifying sophisticated hacking techniques. The Implications of The Sonne Finance Hack The Sonne Finance hack is yet another intriguing case of cryptocurrency theft recorded so far in 2024. It highlights the growing tendency of digital currencies to become mainstream and the security challenges surrounding them. While appropriate measures have been taken to avert further theft, the incident raises critical questions about the vulnerability of DeFi protocols. Here's a deeper look at some of them: DeFi's Security Flaws:Decentralized Finance has a massive potential to revolutionize the financial landscape but often lacks the robust security infrastructure of traditional financial institutions, exposing DeFi protocols to cybersecurity risks.
A Fast-Paced Landscape:Crypto attackers are constantly developing new methods to exploit vulnerabilities. AI's ability to adapt and learn from these evolving threats can provide an edge for DeFi protocols.
Proactive Security:The Sonne Finance incident highlights the importance of proactive security measures. Implementing AI-powered security systems before an attack occurs can significantly mitigate the risk of financial losses.
Increased Adoption of AI Security:This incident is likely to accelerate the adoption of AI security solutions within the cryptocurrency industry. Web3 companies may increasingly resort to  AI to protect their assets and user funds.
Increased Collaboration: The complex nature of cyber threats necessitates collaboration between security firms, DeFi protocols, and regulatory bodies. Sharing information and best practices can create a more robust defense system. Conclusion The cyberattack on Sonne Finance can be described as the doors of the temple of Janus. While the incident itself is a cause for concern, it also highlights the immense potential of AI in detecting potential cybersecurity threats and mitigating them. By implementing robust AI security systems and fostering collaboration across the industry, DeFi platforms can build a stronger defense against cyber threats and ensure a safer future for investors and users alike. AI in web3 security is neither a passing fad nor a makeshift solution. On the contrary, it is now a focal point in the fight against cryptocurrency thefts and cyber attacks. AI companies in web3 are training AI algorithms to detect potential cyber attacks on DeFi protocols in a bid to reduce the probability of an attack significantly while increasing the response time. The ability of AI algorithms to detect potential threats can save millions of dollars of investors’ funds, highlighting not just the growing importance of AI but also cementing its place in web3 security, which is often described as a $4 billion problem. Although the use of AI in crime detection has long been around, it has only found relevance in crypto security where cyber thefts are rampant. AI algorithms are trained through a process called machine learning to spot anomalies and patterns commonly associated with cyber thefts and other types of crypto-related cyber attacks such as phishing and ransomware attacks. AI’s ability to provide a sophisticated security system gives it an edge over malicious software used by bad actors in attacking DeFi protocols. The advancement that AI in web3 security represents is preeminently self-evident in the latest Sonne Finance hack. There are numerous examples of such exploits and AI use cases but this incident being the latest in a long list of cyberattacks on DeFi protocols deserves to be critically studied. This sentiment is also informed by the volume of media coverage it has generated in the last 24 hours. media coverage media coverage The Sonne Finance Hack Sonne Finance, a decentralized lending protocol, reportedly lost $20 million in a major hack on May 14, 2024. The attack occurred in seven different transactions and lasted for thirty minutes before Sonne Finance halted operations to avert further thefts. Four minutes before the attack, Cyvers AI, a web3 security firm, detected the potential threat and alerted Sonne Finance at about 10:30 pm to the imminent danger. Commenting on the Sonne Finance hack,  Meir Dolev Co-Founder and CTO of Cyvers.AI said: " The hacker exploited Compound V2 empty market vulnerability where he conducted a precision loss attack that led to more than $20 million loss in 7 different transactions. Cyvers have detected the attack four minutes before the first exploit transaction" " The hacker exploited Compound V2 empty market vulnerability where he conducted a precision loss attack that led to more than $20 million loss in 7 different transactions. Cyvers have detected the attack four minutes before the first exploit transaction" At the initial stage, Cyvers detected an attack on SonneFinance's USD Coin (USDC) and Wrapped Ether (WETH) contracts, which had already lost $3 million, but the situation quickly escalated resulting in a total loss of over $20 million by the protocol. This incident underscores the growing importance of Artificial Intelligence (AI) in the detection and mitigation of cryptocurrency theft. Moreover, as traditional security methods often struggle to keep pace with the ever-evolving tactics of cybercriminals. AI, however, offers several advantages: Real-time monitoring: AI systems can be deployed to continuously analyze vast amounts of data, identifying suspicious patterns that might escape human analysts. Real-time monitoring: AI systems can be deployed to continuously analyze vast amounts of data, identifying suspicious patterns that might escape human analysts. Faster response times: AI systems can react to threats much quicker than humans, allowing for a timely response to mitigate damage. Faster response times: AI systems can react to threats much quicker than humans, allowing for a timely response to mitigate damage. Improved threat detection: AI algorithms are constantly learning to detect anomalies and patterns and may soon become adept at identifying sophisticated hacking techniques. Improved threat detection: AI algorithms are constantly learning to detect anomalies and patterns and may soon become adept at identifying sophisticated hacking techniques. The Implications of The Sonne Finance Hack The Sonne Finance hack is yet another intriguing case of cryptocurrency theft recorded so far in 2024. It highlights the growing tendency of digital currencies to become mainstream and the security challenges surrounding them. While appropriate measures have been taken to avert further theft, the incident raises critical questions about the vulnerability of DeFi protocols. Here's a deeper look at some of them: DeFi's Security Flaws:Decentralized Finance has a massive potential to revolutionize the financial landscape but often lacks the robust security infrastructure of traditional financial institutions, exposing DeFi protocols to cybersecurity risks. A Fast-Paced Landscape:Crypto attackers are constantly developing new methods to exploit vulnerabilities. AI's ability to adapt and learn from these evolving threats can provide an edge for DeFi protocols. Proactive Security:The Sonne Finance incident highlights the importance of proactive security measures. Implementing AI-powered security systems before an attack occurs can significantly mitigate the risk of financial losses. Increased Adoption of AI Security:This incident is likely to accelerate the adoption of AI security solutions within the cryptocurrency industry. Web3 companies may increasingly resort to  AI to protect their assets and user funds. Increased Collaboration: The complex nature of cyber threats necessitates collaboration between security firms, DeFi protocols, and regulatory bodies. Sharing information and best practices can create a more robust defense system. DeFi's Security Flaws: Decentralized Finance has a massive potential to revolutionize the financial landscape but often lacks the robust security infrastructure of traditional financial institutions, exposing DeFi protocols to cybersecurity risks. DeFi's Security Flaws: A Fast-Paced Landscape: Crypto attackers are constantly developing new methods to exploit vulnerabilities. AI's ability to adapt and learn from these evolving threats can provide an edge for DeFi protocols. A Fast-Paced Landscape: Proactive Security: The Sonne Finance incident highlights the importance of proactive security measures. Implementing AI-powered security systems before an attack occurs can significantly mitigate the risk of financial losses. Proactive Security: Increased Adoption of AI Security: This incident is likely to accelerate the adoption of AI security solutions within the cryptocurrency industry. Web3 companies may increasingly resort to  AI to protect their assets and user funds. Increased Adoption of AI Security: Increased Collaboration: The complex nature of cyber threats necessitates collaboration between security firms, DeFi protocols, and regulatory bodies. Sharing information and best practices can create a more robust defense system. Increased Collaboration: Conclusion The cyberattack on Sonne Finance can be described as the doors of the temple of Janus. While the incident itself is a cause for concern, it also highlights the immense potential of AI in detecting potential cybersecurity threats and mitigating them. By implementing robust AI security systems and fostering collaboration across the industry, DeFi platforms can build a stronger defense against cyber threats and ensure a safer future for investors and users alike.

Cyvers Early Detection Of Sonne Finance Hack and The Importance Of AI In Web3 Security

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 38 of 38. Conclusion As the NSS and NCS note, the 2020s are a decisive decade, and actions taken now will shape the contours of cyberspace, digital technologies, and the digital economy for the future. As it implements this strategy, the Department of State will work with Congress and interagency partners to evaluate current cyber authorities and to amend or create authorities as needed for the Department to keep pace with evolving cyber and digital technologies. Building innovative, secure, and rights-respecting digital ecosystems is a process that will extend beyond the timespan of this strategy, and likely to be characterized by progress, pauses, and reversals. There will be, however, some early signposts that will indicate the United States, allies, and partners are moving forward. First, the United States, allies, and partners, along with the private sector and civil society, will build on the early successes of the G7-Hiroshima Code of Conduct, the Biden-Harris Executive Order on AI, and the UK AI Safety Summit. We will reach consensus on guiding principles that foster innovation and the development of responsible AI as well as make significant investments to build the knowledge and infrastructure necessary to measure, evaluate, and verify advanced AI systems, including through the launch of the U.S. AI Safety Institute. We will advance global norms on the responsible and rights-respecting use of AI-enabled technologies. Second, the United States allies, and partners, along with the private sector, will develop common understandings and shared principles for security and trustworthiness in subsea cable, cloud services, and data centers and will increase support for extending access to cloud services to emerging economies. Third, the United States, allies, and partners will succeed in pushing forward more action-oriented discussions at the UN on international security issues in cyberspace. These discussions will focus on how member states can work together to implement critical elements of the framework for responsible state behavior and on building all states’ capacity to manage cyber-related threats. Fourth, the Department of State will draw on the Cyberspace, Digital Connectivity, and Related Technologies Fund to provide rapid incident response and cyber aid quickly and effectively, as well as longer-term capacity and resilience building. These strategic investments will not only strengthen the role of the United States as a digital partner, but also generate larger, self-sustaining investments by host countries in their own cybersecurity and digital transformation. oving forward, the United States will strive for a future in which cyberspace and digital technologies are used to advance economic prosperity and inclusion, enhance security, promote and protect human rights and democracy, and address transnational challenges. The Department of State will build and extend digital solidarity to partners across the globe. The United States recognizes the need to work together to align approaches to data and digital governance and to promote the research, development, and deployment of critical and emerging technologies. The United States seeks to be the partner of choice in improving cybersecurity, building resilience, responding to, and recovering from malicious cyber activity. Digital solidarity aims to connect people and information like never before, fostering a more inclusive, secure, prosperous, rights-respecting, safe, and equitable world. Notes [1] The idea of digital solidarity was first promoted by Pablo Chavez, “Toward Digital Solidarity,” Lawfare, June 28, 2022, https://www.lawfaremedia.org/article/toward-digital-solidarity [back to 1] [2] Fast Track Action Subcommittee on Critical and Emerging Technologies, Critical and Emerging Technologies Update, National Science and Technology Council, February 2024, https://www.whitehouse.gov/wp-content/uploads/2024/02/Critical-and-Emerging-Technologies-List-2024-Update.pdf [back to 2] [3] Anna Fleck, “Cybercrime Expected To Skyrocket in Coming Years,” Statista, February 22,2024, https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027/ [back to 3] [4] ITU, The Gender Digital Divide,  https://www.itu.int/itu-d/reports/statistics/2023/10/10/ff23-the-gender-digital-divide/ [back to 4] [5] UN, Secretary General, Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security, July 2015, https://digitallibrary.un.org/record/799853?ln=en&v=pdf [back to 5] This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 38 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 38 of 38. here here Conclusion As the NSS and NCS note, the 2020s are a decisive decade, and actions taken now will shape the contours of cyberspace, digital technologies, and the digital economy for the future. As it implements this strategy, the Department of State will work with Congress and interagency partners to evaluate current cyber authorities and to amend or create authorities as needed for the Department to keep pace with evolving cyber and digital technologies. Building innovative, secure, and rights-respecting digital ecosystems is a process that will extend beyond the timespan of this strategy, and likely to be characterized by progress, pauses, and reversals. There will be, however, some early signposts that will indicate the United States, allies, and partners are moving forward. First , the United States, allies, and partners, along with the private sector and civil society, will build on the early successes of the G7-Hiroshima Code of Conduct, the Biden-Harris Executive Order on AI, and the UK AI Safety Summit. We will reach consensus on guiding principles that foster innovation and the development of responsible AI as well as make significant investments to build the knowledge and infrastructure necessary to measure, evaluate, and verify advanced AI systems, including through the launch of the U.S. AI Safety Institute. We will advance global norms on the responsible and rights-respecting use of AI-enabled technologies. First Second , the United States allies, and partners, along with the private sector, will develop common understandings and shared principles for security and trustworthiness in subsea cable, cloud services, and data centers and will increase support for extending access to cloud services to emerging economies. Second Third , the United States, allies, and partners will succeed in pushing forward more action-oriented discussions at the UN on international security issues in cyberspace. These discussions will focus on how member states can work together to implement critical elements of the framework for responsible state behavior and on building all states’ capacity to manage cyber-related threats. Third Fourth , the Department of State will draw on the Cyberspace, Digital Connectivity, and Related Technologies Fund to provide rapid incident response and cyber aid quickly and effectively, as well as longer-term capacity and resilience building. These strategic investments will not only strengthen the role of the United States as a digital partner, but also generate larger, self-sustaining investments by host countries in their own cybersecurity and digital transformation. Fourth oving forward, the United States will strive for a future in which cyberspace and digital technologies are used to advance economic prosperity and inclusion, enhance security, promote and protect human rights and democracy, and address transnational challenges. The Department of State will build and extend digital solidarity to partners across the globe. The United States recognizes the need to work together to align approaches to data and digital governance and to promote the research, development, and deployment of critical and emerging technologies. The United States seeks to be the partner of choice in improving cybersecurity, building resilience, responding to, and recovering from malicious cyber activity. Digital solidarity aims to connect people and information like never before, fostering a more inclusive, secure, prosperous, rights-respecting, safe, and equitable world. Notes [1] The idea of digital solidarity was first promoted by Pablo Chavez, “Toward Digital Solidarity,” Lawfare, June 28, 2022, https://www.lawfaremedia.org/article/toward-digital-solidarity [back to 1] [1] https://www.lawfaremedia.org/article/toward-digital-solidarity https://www.lawfaremedia.org/article/toward-digital-solidarity [back to 1] [back to 1] [2] Fast Track Action Subcommittee on Critical and Emerging Technologies, Critical and Emerging Technologies Update, National Science and Technology Council, February 2024, https://www.whitehouse.gov/wp-content/uploads/2024/02/Critical-and-Emerging-Technologies-List-2024-Update.pdf [back to 2] [2] https://www.whitehouse.gov/wp-content/uploads/2024/02/Critical-and-Emerging-Technologies-List-2024-Update.pdf https://www.whitehouse.gov/wp-content/uploads/2024/02/Critical-and-Emerging-Technologies-List-2024-Update.pdf [back to 2] [back to 2] [3] Anna Fleck, “Cybercrime Expected To Skyrocket in Coming Years,” Statista, February 22,2024, https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027/ [back to 3] [3] https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027/ https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027/ [back to 3] [back to 3] [4] ITU, The Gender Digital Divide, https://www.itu.int/itu-d/reports/statistics/2023/10/10/ff23-the-gender-digital-divide/ [back to 4] [4] https://www.itu.int/itu-d/reports/statistics/2023/10/10/ff23-the-gender-digital-divide/ https://www.itu.int/itu-d/reports/statistics/2023/10/10/ff23-the-gender-digital-divide/ [back to 4] [back to 4] [5] UN, Secretary General, Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security , July 2015, https://digitallibrary.un.org/record/799853?ln=en&v=pdf [back to 5] [5] Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security https://digitallibrary.un.org/record/799853?ln=en&v=pdf https://digitallibrary.un.org/record/799853?ln=en&v=pdf [back to 5] [back to 5] This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State by the U.S Department of State

CYDER

getcyder.com

1-10 employees

Since 2021

COMPANY RANKING

CYDER

EVERGREEN INDEX #3166

Representing this company? Click here to claim and customize this page!

Cyder WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

CYDER

getcyder.com

1-10 employees

Since 2021

COMPANY RANKING

CYDER

EVERGREEN INDEX #3166

RELATED COMPANIESRANK

STORIES ABOUT CYDER

Representing this company? Click here to claim and customize this page!

Cyder WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!