lulz

100 blocks to go

We builders went from being pissed off the clankers and corporations were ignoring our ROBOTS.txt to now praying someone's uncensored clanker reads our SECURITY.md and actually tells us of vulnerabilities ... at least we improved the file type /s

Excellent write up and guide for #WTF may happen to your node and channels during #bip110 signaling begins this #saturday gg to the @npub1263g...9e93 team for this and keeping it agnostic to whatever choice a noderunner takes "13. What not to do Do not leave Lightning channels open through the split. Nearly everything else here is recoverable; this and a replayed spend are not. Do not leave closing until the last blocks. A close that has not confirmed by 961,632 is inherited by neither chain as a settled close, and on a chain that stalls it may never confirm at all — leaving you roughly where you started. Broadcasting is not closing. Do not switch bitcoind flavors while channels are open. A deep reorg can force-close them. Do not trust low confirmations. Even in the best case — a divergence that heals — orphaned non-signaling blocks mean repeated shallow reorgs. Do not assume a running node is a working node. Check that your height is advancing. Do not leave coins on an exchange through the window. Do not run an unvetted hard-fork binary on a machine holding your keys. Do not assume a transaction stays on the chain you broadcast it to. Between Chains A and B there is no replay protection at all. Do not try to split coins on a chain that is not producing blocks. Nothing confirms there. Do not assume the hard fork has replay protection. Verify it. Do not assume replay protection is good news for an open channel. If it works by changing the signature hash, it invalidates the pre-signed commitment that is your only unilateral exit — your balance there becomes unrecoverable without your counterparty. Both designs are bad; only closing avoids both (§8)." View quoted note →

#bitcoin #redteam #cve #AI #audit

Verifying your browser…

Verifying your browser…

#warrent #canary goes silent #Boltz View quoted note →

"We fund decoy “honeypot” wallets carrying that exact flaw on mainnet, some hardened with extra dice rolls or a passphrase, and track which ones an attacker sweeps and how fast. This maps the frontier of what coins are being confiscated"

tripwire // scoreboard

#entropy #RNG #honeypot #coldcard View quoted note →

#BitGo CEO drops 100 coin #bounty to Anthropic bc1qg4jcyumevszta3rs869v9jrf6rz9z360svp03jsl5xcryfd7xqvs4hurnq View quoted note →