July 22nd, 2022

NFTs have been all the rage these days, but did you know the NFT in your wallet could be collecting information about you? This information could include your IP address, operating system, and geography.

All it takes is the creator placing an image URL in the NFT ‘s metadata that points to a machine they control that logs the request. Many web servers like Apache and NGINX can do this by default. The team at HOPR have created a series of Non-Private NFTs that show this vulnerability.

Note: this is in addition to the data a wallet like MetaMask leaks to RPC providers. You can learn more about this by checking out DERP (Dumb Ethereum RPC Provider) from the HOPR team.

You can see them generated live at their Non-Private NFT tool. They have a great post on explaining how it works and why it’s bad: Your NFT Might be Watching You. They also have a Non-Private NFT GitHub repo that shows how the collection could work.

July 1st, 2022

Gnosis Chain, formerly xDai Chain, is an execution-layer EVM chain for stable transactions. Rather than using Ethereum to pay for gas fees, it uses the xDai stablecoin. Transactions cost just a few cents and running a validator requires only 1 GNO making staking much more accessible.

Dai can be bridged from Ethereum using the official OmniBridge but that route can be prohibitively expensive. It’s much more affordable to bridge from a Layer 2 or a sidechain such as Polygon. There are many different ways to do this, but here’s one I have often used.

To bridge to Gnosis Chain from Polygon:

  1. For US citizens, one of the cheapest and easiest on-ramps is Crypto.com . Purchase MATIC with your bank account or credit card.
  2. Withdraw the funds to your Polygon (MATIC) wallet. Be sure to select the Polygon (MATIC) network and not ERC-20.
  3. Use a DEX such as 1inch to swap the MATIC to Dai.
  4. Initiate a cross-chain transfer to bridge your Dai to xDAi on Gnosis Chain:
July 1st, 2022

When those of us working in the nonprofit space think of nonprofit discounts, we often think of sites such as TechSoup. While that’s a great resource with a large number of discounts for many of the large mainstream vendors, there are many more digital tools and services that offer nonprofit discounts directly as well.

Often these discounts are published directly on the service’s website or in their help documentation. However, there are many services that offer discounts but don’t mention it publicly. Before signing up for any service, it’s a good idea to reach out to their sales or support team to ask whether they offer any nonprofit discounts or special pricing.

Because so many discounts aren’t publicly mentioned, I started a crowdsourced list of services offering discounts along with how to qualify for them. Most of these are for 501(c)(3) organizations only but some are available to 501(c)(4) organizations too.