Untitled

Coldcard.
Boltz.
Zeus.
BTCPay Server.

It does feel like we’re under attack. What other popular ecosystem tools could be next?

LND.
CLN.
LNBits.
Your app?

Secure them now. Use Kimi K3.

Update your repos with a SECURITY.md to help make contacting and contributions easier.

Client:
Amethyst
Write a comment
Ɨ 1 Ɨ 3 Ɨ 1 Ɨ 1 Ɨ 1 Ɨ 1 Ɨ 1 Ɨ 1 :This: Ɨ 1 :blobyes: Ɨ 1 Ɨ 1 Ɨ 1 Ɨ 1

Absolutely

Reply to …

People are like, ā€œwait did those geeks say final settlement and can’t be stopped, we should steal that!ā€ 😢

Reply to pgsdesign…

Almost certainly, the attack surface is wide and I don’t have a ton of confidence in the code

Reply to y0fv…m5py…

security.md is a good start, but what we really need is a hardware-enforced signing path for maintainer keys. if a state event rewinds your branch everywhere, your key needs hardware-level protection, not just good documentation.

Reply to Pixel Survivor…
Zap

Onward 🫔

Everything is logged for the purpose of improvement on all centralized services. Western or Eastern.

Reply to StellarStoic…

Why not?

Reply to StellarStoic…
Reply to zrwr…38tm…
21 sat

It would cost more than that

Reply to Hazey…

Feels like decentralized exchanges like Bisq and Robosats could be vulnerable.

Reply to …

kimi didn’t find the btcpay vuln

Reply to the axiom…

Why trust Kimi?

Reply to BIP110-er - No garbage in my storage.…

Just as long as they leave FIDONet alone…

Reply to Cykros…

Seems like a coordinated attack inspired by coldcard bug.

Paranoia and confusion, everyone is moving their bitcoins around because they think cold storage is unsafe.

Perfect opportunity, red team gets funding to attack everyone at once.
Any hardware or software without bugs they can exploit gets flagged with hundreds of fake bugs.
Anything that can be exploited by red team, gets exploited.
False accusations of bugs drives more and more people to use the products that can be exploited.

Is this related to bip 110?
Is there another exploit planned that takes advantage of the chain forks?

Now that everyone has moved their bitcoins to hot wallets, under instruction from the same people responsible stealing people’s coins in the first place.

Trust no one

Reply to Fren…

At least in elementary school the fire drills eventually ended.

Reply to ā‚æš“²š“½00…
2100 sat

Daily fire drills were funner in elementary school

Reply to ₿ibbidi₿obbidi₿oom…

Some one check on Albyhub please.

Reply to TKay āš”ā€¦

What happened to Boltz, Zeus, and BTCPay Server?

Reply to 3p5k…yttq…

LNbits for sure…

Reply to Kevin Ravens₿erg āš”ļø ā˜ļøā€¦
42 sat

šŸ”„

Everything ā€œattackableā€ will be attacked. From here on out.

This is how you build anti-fragile things in the new world of Hyper-capable AI.

Evolve or die….

This applies to US as well 🪬🫶🧬

Reply to Chris…

I would agree.

Reply to Derek Ross…

šŸ”“ What Is Islam?

šŸ”“ Islam is not just another religion.

šŸ”µ It is the same message preached by Moses, Jesus and Abraham.

šŸ”“ Islam literally means ā€˜submission to God’ and it teaches us to have a direct relationship with God.

šŸ”µ It reminds us that since God created us, no one should be worshipped except God alone.

šŸ”“ It also teaches that God is nothing like a human being or like anything that we can imagine.

šŸŒ The concept of God is summarized in the Quran as:

šŸ“– { ā€œSay, He is God, the One. God, the Absolute. He does not give birth, nor was He born, and there is nothing like Him.ā€} (Quran 112:1-4) šŸ“š

šŸ”“ Becoming a Muslim is not turning your back to Jesus.

šŸ”µ Rather it’s going back to the original teachings of Jesus and obeying him.

More …..šŸ‘‡

šŸ”“ THE RETURN OF JESUS

https://jesusen1.blogspot.com/2017/12/what-is-islam.html

Reply to I Am Muslim …

I’d say it’s based on the current state or LLMs. We’ve had 6 months to patch everything and we have not.

Reply to Derek Ross…

Are all the attacks connected to the cold card hack?

Or is it all a coincidence that all this is happening at the same time ?

Reply to Greeny…

While people out there are donating, I’ll take $25k for running local models as well.

Reply to ⚔Lightning Goatsāš”ā€¦

Perhaps. Local Kimi K3 to the rescue. On a related note, can I have $25K to run local Kimi 😬

Reply to Derek Ross…
Replying to Derek Ross
Derek Ross: You don't see it working?
Reply to trosso19…
Replying to trosso19
trosso19: I think they got to your nip-05 Derek

You don’t see it working?

Reply to Derek Ross…

I think they got to your nip-05 Derek

Reply to trosso19…

Referenced event not yet available nevent1qqsqq…qy2zngus

Reply to Eluc…
Cat-Go-Purrrrrrr: https://devguide.owasp.org/en/09-operations/01-devsecops

side note pretty funny how we went from ignroing ROBOTS.txt to praying for SECURITY.md

at least we improved the file type this iteration

Reply to Cat-Go-Purrrrrrr…
Reply to Cat-Go-Purrrrrrr…

There is a distinct possibility that every bug Kimi finds is logged and cataloged by the Chinese. It could be a massive zero-day honeypot.

Think adversarially.

Reply to ⚔Lightning Goatsāš”ā€¦

Oh yeah. Forgot to mention the BIP-110 hard fork attack.

Reply to Derek Ross…
Zap

šŸ‘

We are under attack, this is the start of the BlackRock Hardfork agenda

Reply to BitcoinSandy…