For anyone that saw my OpSec talk during EthCC and is curious about the paper I was referring to, Reflections on Trusting Trust, here is a mirror of it. Hack the Planet! :)

I’m at @ETHGlobal Cannes, with a couple Firefly DevKit devices to hand out. Drop by and visit me if you’d like one to play with, hack on or just satiate your FOMO. Or just chat about Firefly or Ethers.js. :)

Is anyone in Cannes, and doing Pokémon GO Fest this weekend?

Curious what goes into assembling a Firefly Pixie DevKit? We've got a couple hundred more ready for ETHCC, come find us! Hack the Planet! :)

I’m don’t normally pay much attention to it, and I don’t trust NPM downloads as a metric in general, but needed to look it up today, and what the heck is going on? Is someone running an indexer against packages that went awry?! I’d be curious to see it adjusted for unique IP addresses (would also de-dup all those GitHub Action CI tests).

Is there a “best practices” guide for releasing a Solidity library? Is there an npm of sorts for Solidity libraries? Any magic json payloads that should have specific filenames?

Just voted on SPP2, but please feel free to make (justified) suggestions where to revise my votes. I tended to favour projects I’m familiar with, but there were a lot that I was previously unaware of, relying on the voices of other delegates to help colour in my blind spots. A few choices also seemed to have very high potential and a small ask. Some had a large ask, but solid history… Anyways, always open to criticism. :) Future ask: required tl;dr 280 byte abstracts from each project included on each option. ;)

The `latest` npm tagged version of Ethers now has EIP-7702 support. The old/experimental `beta-eip-7702` npm tag will be retired in a few months, once the weekly downloads drop off. Also try out the new EIP-6963 `const p = await ()`. Happy Hacking! :)