Bigger video, testing by @coolmole on 3Speak
Do not fret
All right, and we are recording. All right. Hello, hello, hello. Welcome to another edition of Hive Thrive. We are at Show 56. Holy crap, holy. Hard to believe how fast time goes. Today, we will be talking with our guest, Louis 8-8. Lewis, are you out there? Hey, yeah, I'm here. Hello. Great. Welcome to the show. We're happy to have you on. We're going to be dipping into some security things. And, Mino, how are you doing out there? You're our co-host today. It's been a little while since we've co -hosted together. I'm doing great. Excited to be here. Excited to talk about this nerdy stuff, you know, that it's right up my alley. Nice. Well, we're going to switch it up a little bit. I'm doing the intro, and so that means I'll be kind of diving in first with some questions for you, Lewis, about just, you know, well, a lot of times we ask about your username, but I think maybe your username's pretty explanatory. What's the 8-8 all about? Is there something significant with the 8-8? quite simple. When I tried to choose a username back in the steam days, legacy chain, I was not that creative as I'm today right now. It's just my birth date, born in the 88. Okay, there you go. So we all know when I like... So for security purposes, we can start checking that number with your passwords. Yeah, we know your birthday now. Yeah, yeah. If you have a good cracker. So, let's, you know, what's the history? You know, obviously you've been on the chain before it was named Hive. How did you find the original chain chain? Back in the days, I think it was roughly 2018. There was one German guy created a YouTube video. the guy called Sempa Video, he's a tutorial guy making IT tutorials on YouTube. And I saw this video, and a few days later, I just registered, and this was kind of hype phase, and the registration of my account, Steamat Inc. did it, I think three months later in January. And it took a very long time. I already forgot about it. And then one day, I saw the email, hey, your accomplice created, this is your passwords. Yeah, like, you send me the passwords via email. Thank you for, thank you for being part of Stuart these days. So, yeah, it took a long time. And so, and so was that in the days where you could, like... do a simple little post and make a thousand bucks. Did you catch any of those those wonder posts? Not that much stuff. I think it came a little bit later after the what is called makeup tutorials, thingy, where I don't know, get thousands of dollars for just making a video about how to make up. I don't know. Bibi, we record something with Bibi. I don't know. But, yeah, I was, I don't know what, I need to go back to my very first post, I don't know, what I wrote in the back in the days, I have to figure out. I mean, everybody can figure out. Yeah, I could tell you, I made zero on my first two posts, and I think it was my third post that I'd made nine cents, and I thought it was the coolest thing ever. I was like, but, yeah, so. So, you know, I think some people know, but I'm kind of curious, was it you or your brother first to be born or to find the chain, either one? He can give me both answers. He was born first, yeah, he is 12 minutes older than me. Okay. He was, his account was created first, I think. So you found it independent. You found it independent of each other. No, I think Stimit just created his account earlier than mine. I don't know. Back in the day, it was, you can register here, and then Steamat Inc. needs to sign the public keys with their private key. That's how the account creation works. And then you get an email with your credentials, etc. Maybe he created his account first. Hmm. He got it first, but you found it. He found it through you. Yeah, I told him. I told him about, hey, look this. Let's try it out. Correct. Nice. And so why don't you give us a tiny, like, kind of just a little bit of, like, a history of your experience of the way you, you, like, used the chain when you first came on versus what you're doing now? Like, what was your, what's your journey been like on first cement and then to hive? Okay, you guys, have a couple hours. Okay, in the abbreviated version, you know. So, okay, long story short, I started with translations. There was some guys on Steam it back in the days, they made posts in English, I translated them to German for the German community. That were some of my first post, then I figured out... open source rewarding project called Utopian. There was, I was involved in, yeah, starting finding bugs in applications and translations and helping the ecosystem, the entire open source ecosystem back in the days like 2019, 18. And that was kind of head start. In 2018, we were, I was so hooked in this platform. to join the Krakhov Steamfest back in the days in Krakow here. And after that, I met some people getting familiar with them. In 2019, it was already the days, okay, first time Asia for me, my trip to Bangkok for the Steamfest as well. Everybody was hyped about SMTs, smart media, tokens, et cetera, they never came. Lucky. And, yeah, for that it was, I got recognized in the community, what I do. I already made some pictures. I had some photo stuff with me and made pictures about the event and described what I, what I... saw and learned in the ecosystem so far besides the SteamFest documentations. Yeah, then... I remember meeting you in Krakow briefly, but I kind of like, somehow, like, remember you more from the Thailand, and I remember you were doing the photos and stuff in that one, yeah, I do. Yeah, and Team Germany is like kind of bowling masters two times already. I mean, Team Germany, bowling and Steamcasts are unbeaten. So, so long. I think I can remember we played against in Krakow. Yeah. Yes, I believe we bowed against you. I had a random, rando team. I remember, I always remember the, just, the whole Ned factor, and then, and just, like, the difference of the Krakow versus the Thailand, like, there was so many people at the Krakow that, you just sort of got lost, whereas in the Thailand, you really felt like, I really felt like I got to know people better in that one. I enjoyed them both, but one was much more personable. Interesting. I think I got my internet connection back on the computer, so I would give me five seconds to switch, if it's fine. Okay, we'll count you down. Okay, go for it. Yeah, it's funny, it's funny how, like, those high, oh, you do, you sound, you sound smooth and silky now. It sounded good. Sorry, that's my microphone setup and my main PC. Now the real show can begin. What do we talk about already? I don't know. We were getting into your history, and then we kind of talked about the in-person meetups. We were there at Hive Fest. So, yeah, you could give us a little more of your synopsis of what your journey has been like thus far. So then you started getting involved with High Fust, taking pictures, becoming more activated into the community, and then where did you go from there? I mean, I had almost fun on the blockchain. I mean, a lot of different areas on the blockchain. It means security researchers, translations, and photography, and... be involved in projects to help them because I'm having a web developer background. I'm creating websites for over 20 years. So I'm sitting in front of the computer anyway and needs to read code, understanding code, etc., etc. So I'm basically doing stuff with the computer in the IT. So it was easy for me to find place in... in the cybersecurity area. And that's what I'm currently doing. I got funding from the DHF, luckily, a huge program. I mean, I got Claude Code Max for $200 in the first time. Now I got the $90. Yeah, more or less working the entire days. I mean, I'm all the time thinking about cybersecurity. That's, that's, I don't know, I don't, I get into my DNA, I don't know, kind of sounds weird, but every time where I go, I check about cybersecurity, I have commands on my, on my keyboard, on a hotkey to test things out, don't have to write it. write it manually, etc. So, yeah, I'm kind of... Did you happen to catch our, the cybersecurity episode where we had Rangquest, I believe, was his name? No, I don't know if you caught that one. If someone can drop me a link about that, that would be lovely. I think it would interest you. I really enjoyed that chat that day. He's a pretty knowledgeable dude, and I think it would be up your alley. So you're also, you also have, you know, you're a witness. How long has that been going on? What's the history like for that? How you've been enjoying being a witness? Yeah, I mean, I already thought about, since the steam days, how does this work, what does it do, but never got into it. But after the Hive, hard fog, the change from steam to Hive, I was more interested in this to just check out because there was the hostile takeover, etc., etc., and the witnesses working together. to fight against this attack. And because, I think, one or two years later, I decided to start my witness. Okay. And what's your current ranking? Where are you at? I think 28. Climbing it, man. So those 20s, they got to get nervous. You're getting close. No, no, no, no, look the numbers, it's not even close, but I really appreciate every kind of support and help there. I would, it's, I mean, being at 28, 29, is not that, technically cited, not that much different to be in the top 20. But there's a lot of more payment. You get a little more payment if you get in it that. Yeah, there's a very small payment, yeah, but there's already more payment in place 24, 22 or so. I mean, there's a lot of more pressure and visibility for you as being a top 20 witness. And you're a decision maker. You have... Yeah, we all can have our... like everybody, you know, has their opinions, but, you know, when I, when I look at that witness list, I, I definitely see some names there that don't seem that activated in the chain. So, to be perfectly honest, I'd love to see somebody like you get moved up a little bit farther because you're clearly very activated in the chain. So, I mean, if, if that was a, if, if, if how active you are on the chain, deemed whether you were a top 20 witness, in my opinion, that should pull you a little closer. But I'm just one person with one dumb opinion, so. And so just before I kind of, as we're doing the casual who you are, just kind of curious. I thought of it as you were speaking before. Is Hive your main employment or you're doing another job in your so-called real life? Yeah, I have a real-life business. As I said, I'm a web developer and that's my business. I'm creating and maintaining websites for small and mid-sized businesses, and that's what I'm daily doing. Okay, so Hive is more a side hustle, like hobby, hobby hustle. Yeah, correct. About site, yeah, I mean, sometimes if you very hooked at a bug or a discovery, you have something in mind, you really want to discover and check out and research on, because in your head you think, hmm, there could be a problem in this kind of area on the chain. Then it takes you, I don't know, 3 to 4 a.m. in the morning in front of the computer to do research. And, yeah, the main job sometimes getting a little bit far behind, but that's my main job normally. Nice. Well, you know, here we get to a point of the show where we pass the baton. I'm sure Meno has... Tons of hard-hitting questions for you. Not so much. Hit me up, but, but, Mino, you out there? Yeah, yeah. I mean, I'm going to try not to be too nerdy with the questions and stuff, because it can be boring for most people, but I said, I'm going to try. We met already, Meno. We already met, right? That's right. We met in Poland all those years ago. Yeah, in Krakhov. Yeah, back in the day. It's been forever now, a lifetime ago. Yeah, let's see you at the next one. Yeah, I hope. Well, now it's going to happen in Spain, right? That's what I, is that, do I have that information, correct? The next one is in Spain? Yeah, Viva Barcelona. Aha, that's going to be great. Boylewis, I do want to ask you, I do want to ask you, how is it that you got into this whole, you know, like, oh, security and hacking and all stuff? What made you, what made you say, okay, this is, this is what I'm passionate about? Like, I love it. I mean, hacking is kind of harsh word, or it's like, it's not that. Yeah, it's not that word, I would say, I'm a hacker. I'm a researcher. I'm a security researcher. Yeah, sometimes kind of hacker, yeah. But how I came into this field. I mean, I already started back in the days in the steam days and the utopian and found bugs in... I don't know, I had to post about it, and I need to go back in history and check what I already found back in the days. It was kind of, it's not steam-related back in the days software most of the time, but it was just applications. They have, most likely, cross-site scripting. And cross-sides scripting is very a part that hooked me. very serious because in our hive ecosystem, we, nobody should trust an input from anyone because it could be dangerous. So the front ends needs to sanitize everything. Yeah, I... Yeah, that's... Yeah, I want to share something with the chat that happened not that happened not that long ago, maybe like a month ago. Lewis sends me a DM and tells me to go check out this picture that he shared. And I'm like, all right, on Snappy, right, because he's using, he used my app. And then I do, and then he sends me a DM with my IP and more or less where I am and all this stuff. And I'm like, what the hell? Sorry about that, yeah, I mean. But I had no idea, I had no idea that vulnerability existed, you know, and of course. You could say, okay, who cares that? But after I report it to you... Yeah, right away. Yeah, but after I reported to you, you technically understand how it works and it should be fixed, right? Oh, yeah, it's fixed now. I've fixed at the same day. I just did not... You know, now it's going through a problem. I know. But the thing is... You are one of the guys... Yeah, you are one of the guys that fixing bugs immediately. I mean, we... I don't go into details that much on stuff, but for example, I found cross-side scripting, like something kind of stuff like you had in your application on the Hive.Block front end. and I was asking who is responsible to maintain the front page and making updates on it? Yeah, and... Who is, well? Yeah, and Gandalf. Yeah, I mean, there's a lot of, because it's open source, but there's a few people just can run the actual version. So, Gandalf took place in, I don't know, it took him two hours, I reported at 10 p.m. and it was finished in 1 EM and pushed and live and fixed and, yeah, everything. So, congrats, I made, about this, I made a pause about it. And because it was, okay, it's fine, it's open source, you can check it, fine, yeah, and it's safe. And I... Oh, sorry, go ahead, go ahead, you were saying so. Yeah? Yeah, and for Hive.Block, it's totally safe to check things out. When I'm going on research, most the time, I mean, I'm using AI. Giving the AI, yeah, check for Wulens, yeah, it's fine. But you need to a little bit understand the technical sides of how the high blockchain works and try. And then needs to be a little bit more creative when trying to find vulnerabilities. And it takes time to bring your ideas to a proof of concept and then try it out. prove it, and then report it. It's a long time. It's a long journey. Oh, yeah, of course, of course, but it's enjoyable. I think there's a personality that is more akin to do this. You know, if you have an explorer type of personality, which I think it's your case, then this process, as tedious as it can be, it's enjoyable. More so when you succeed, like I saw the post you made. yesterday about, you know, tracking proposal voting and stuff. And so that's another project that you worked on, which is pretty awesome. Oh, it's just released. Yeah, just released. It's pretty awesome. So it's like, almost like you can't, you are hyperactive. I don't know if that's the word in the chain, and I appreciate that because I think goal witnesses should be. and you bring a lot of value to the chain because of it. So, like, I am grateful that you, you've taken it upon yourself to do these sort of satellite kind of work, you know, checking for vulnerabilities and all stuff trying to add value to the chain. I think that's very, very cool. And speaking up, and I told just before, I said it, like, it's priceless work because we all have this idea that, oh, yeah, this blockchain is going to take off, I'm going to take millions of users and whatnot, you know, and we have this hope. But we also need to be realistic about the fact there's a good chance that our apps aren't ready, and having somebody like you gets us closer to that, you know, because... One thing is when you have just people, you know, small users using this, and another one is when there's like really good money in the blockchain. And we see it all the time. So I'm not saying something crazy. We see it all the time. These blockchain is getting hacked, contracts getting hacked, people getting doxed. This is a common thing. I mean, I can't get into much details, but there were already projects out there in the Hive ecosystem where... possible a drain was possible. So this kind of impact just, just suspension me every day to make everything more and more secure on the Hive blockchain, because we are all developers, not all, 80%, 90% here are just normal persons, but all the developers here. know how to write code, but in the end, it's just a human, most of the time just a human, and humans make mistakes. And it's not against the developer or, oh, you made bad code, no, no, it's just in the end of a day to fix it and to have a more secure. I mean... everybody can create a software and publish and make a post about it and can click on it and, yeah, maybe get trained because it's a, it's a fisher, an unknown person, so the human touch, I only, most of the time I'm only trusting people I already met in real life. That's why also I'm going to the high fest and meet the person. Yeah, you can't beat that. Yeah. Now that said, speaking of High Fest, how many have you been to so far? Last year was the fifth one. And, yeah, this year, if I go, six, yeah. But I got no trophy, Archange. Normally, if you have five visits on the High Fest, you get a trophy. Oh, yeah? So Arcane is dropping the ball? Yeah. Yeah, he needs to bring it this year, and I need to go there. Yeah, yeah, there's a, there's a possibility I heard. I don't know if, I don't know if it's still on the table, maybe Budcoins doesn't want to talk about this, of doing events in, and in Budgoins hotel at some point in time, you know, I'm putting him on the spot. It's Ecuador, right? No, no, no, we're in Guatemala. We're in Guatemala. Would you travel to Guatemala if we have, like, an event happening in Guatemala? I never been there. It's next to Brazil, right? No, this is central. No, no, no, we're right next to Mexico. Mexico, right next to Mexico. Yeah, we've never been there on this side of the world. You know, we were, you know, it was a handful of us were talking, because, you know, we've been, there's, everything's been talk of like, oh, could. can DHF scale back, and we're going through, like, a tight moment, and I basically, you know, ran the numbers, and I was like, oh, well, you know, we could very easily host pretty much an insanely epic, you know, fest here, and I'm pretty positive we could do it for under 10 grand, you know, mainly because all of the key spaces would, you know, I wouldn't charge. I'm in this, I'm in the scene, so, like, I think a lot of the, you got to, like, host that you have to host where each days are. I got two different big spaces that could be used, you know, so then that would be like immediately those costs to be out. But yeah, whatever, that was, that was like ideas. I still think it'd be a cool…